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Investigations  on  Bent  and  Negabent  Functions  via 
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Abstract — Parker  et  al.  considered  a  new  type  of  discrete  F ourier 
transform,  called  nega-Hadamard  transform.  We  prove  several  re¬ 
sults  regarding  its  behavior  on  combinations  of  Boolean  functions 
and  use  this  theory  to  derive  several  results  on  negabentness  (that 
is,  fiat  nega-spectrum)  of  concatenations,  and  partially  symmetric 
functions.  We  derive  the  upper  bound  [j]  for  the  algebraic  de¬ 
gree  of  a  negabent  function  on  n  variables.  Further,  a  characteri¬ 
zation  of  bent-negabent  functions  is  obtained  within  a  subclass  of 
the  Maiorana-McFarland  set.  We  develop  a  technique  to  construct 
bent-negabent  Boolean  functions  by  using  complete  mapping  poly¬ 
nomials.  Using  this  technique,  we  demonstrate  that  for  each  £  >  2, 
there  exist  bent-negabent  functions  on  n  =  12£  variables  with  al¬ 
gebraic  degree  J  +  1  =  3£  +  1.  It  is  also  demonstrated  that  there 
exist  bent-negabent  functions  on  eight  variables  with  algebraic  de¬ 
grees  2,  3,  and  4.  Simple  proofs  of  several  previously  known  facts 
are  obtained  as  immediate  consequences  of  our  work. 

Index  Terms — Bent  and  negabent  functions,  Hadamard  and 
nega-FLadamard  transforms. 


I.  Introduction 

LET  F”  be  the  n-dimensional  vector  space  over  the 
two-element  field  F2.  A  function  from  F2  to  F2  is  called 
a  Boolean  function  on  n  variables.  The  reader  is  referred  to 
Section  I-A  for  all  the  basic  notations  and  definitions  related  to 
Boolean  functions. 

The  Walsh-Hadamard  transform  (a  particular  case  of  a  dis¬ 
crete  Fourier  transform)  has  been  exploited  extensively  for  the 
analysis  of  Boolean  functions  and  used  in  coding  theory  and 
cryptology  [3],  [4],  [6].  For  even  dimension  n,  the  functions 
that  attain  the  largest  distance  from  the  set  of  affine  functions 
(this  maximum  distance  is  the  nonlinearity)  are  called  bent 
functions.  From  the  perspective  of  coding  theory,  these  func¬ 
tions  attain  the  covering  radius  of  the  first-order  Reed-Muller 
code.  Further,  a  Boolean  function  on  an  even  number  of  vari¬ 
ables  is  bent  if  and  only  if  the  magnitude  of  all  the  values  in  its 
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Walsh-Hadamard  spectrum  are  the  same  (flat  Walsh-Hadamard 
spectrum).  The  Walsh-Hadamard  transform  is  an  example  of 
a  unitary  transformation  on  the  space  of  all  Boolean  functions. 
Riera  and  Parker  [18]  considered  some  generalized  bent  criteria 
for  Boolean  functions  by  analyzing  Boolean  functions  that 
have  flat  spectrum  with  respect  to  one  or  more  transforms 
chosen  from  a  set  of  unitary  transforms.  The  transforms  chosen 
by  Riera  and  Parker  [18]  are  n-fold  tensor  products  of  the 

identity  mapping  ^  ^  ^  j  ,  the  Walsh-Hadamard  transforma¬ 

tion  ^75  ^  |  j  ^ ,  and  the  nega-Hadamard  transformation 

-A  ^  |  ?  ^  ,  where  z2  =  —1.  Riera  and  Parker  [18]  mention 

that  this  choice  is  motivated  by  local  unitary  transforms  that 
play  an  important  role  in  the  structural  analysis  of  pure  n -qubit 
stabilizer  quantum  states.  As  in  the  case  of  the  classical  discrete 
Fourier  transform,  a  Boolean  function  whose  nega-Hadamard 
magnitude  spectrum  is  flat  is  said  to  be  a  negabent  function. 

The  research  initiated  in  [18]  leads  to  the  natural  question 
of  constructing  Boolean  functions  which  are  both  bent  and  ne¬ 
gabent  (these  are  referred  to  as  bent-negabent  functions  [16], 
[23],  [24]). 

First,  we  concentrate  on  the  nega-Hadamard  transform  in 
more  detail.  We  prove  various  results  in  Section  II  on  the 
behavior  of  the  nega-Hadamard  transform  on  affine  functions, 
and  also  on  sums  and  products  of  functions.  Then,  we  use 
this  analysis  to  obtain  insights  related  to  the  decomposition 
of  negabent  functions  in  Section  III.  Further,  in  Section  IV, 
negabent  functions,  symmetric  with  respect  to  two  variables, 
are  studied.  Our  technique  renders  a  simple  proof  of  the  main 
result  of  [21],  namely  that  all  symmetric  negabent  functions 
must  be  affine.  Moreover,  a  characterization  of  some  bent-ne¬ 
gabent  functions  in  the  Maiorana-McFarland  (MM)  class  is 
obtained  in  Section  V,  thus  complementing  some  results  of 
[23].  In  Theorem  17,  we  present  another  method  of  constructing 
bent-negabent  functions  on  2 n  variables  for  each  algebraic 
degree  from  2  to  " ,  where  n  =  0  (mod  2). 

In  [23,  Th.  10],  it  is  proved  that  if  /  is  an  MM-type  bent  func¬ 
tion  on  n  variables  (n  even)  which  is  also  negabent  then  the  al¬ 
gebraic  degree  of  /  is  at  most  f  —  1.  Example  6  in  [23]  describes 
a  technique  to  construct  bent-negabent  functions  on  n  variables 
of  algebraic  degree  ranging  from  2  to  ^ .  Moreover,  there  is  no 
known  general  construction  of  bent-negabent  functions  of  alge¬ 
braic  degree  greater  than  " ,  for  all  n  =  0  (mod  4). 

In  Section  VI,  we  describe  a  technique  of  constructing 
bent-negabent  functions  by  using  complete  mapping  poly¬ 
nomials  on  finite  fields  that  constitute  a  special  class  of 
permutation  polynomials  [11],  [14].  First,  we  demonstrate 
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the  connection  between  existence  of  complete  mapping  poly¬ 
nomials  over  a  finite  field  and  the  existence  of  a  class  of 
bent-negabent  functions.  Then,  we  demonstrate  that  for  each 
£  >  2,  there  exist  bent-negabent  functions  on  n  =  12£  vari¬ 
ables  with  algebraic  degree  J  +  1  =  3£  +  1. 

A.  Definitions  and  Notations 

The  set  of  integers,  real  numbers,  and  complex  numbers  are 
denoted  by  Z,  R,  and  C,  respectively.  The  set  of  all  Boolean 
functions  on  n  variables  is  denoted  by  B„ .  Addition  over  Z,  R, 
and  C  is  denoted  by  while  addition  over  for  all  n  >  I 
is  denoted  by  ffi.  If  x  =  (x\, . . . ,  xn)  and  y  =  (y1, . . . ,  yn)  are 
two  elements  of  FI? ,  we  define  the  scalar  (or  inner)  product  x  •  y 
and,  the  intersection  x  *  y  by 

x  y  =  xi'yi  ©  *22/2  ®  •  •  •  ©  xnyn 
x  *  y  ={xiyi,x2y2,---,xnyn). 

The  cardinality  of  a  set  S  is  denoted  by  |S|.  If  2:  =  a  +  bi  £  C, 
then  \z\  =  Qa2  +  b2  denotes  the  absolute  value  of  z,  and  2  = 
a  —  hi  denotes  the  complex  conjugate  of  2,  where  i2  =  —  1,  and 
a,  b  £  R.  Any  /  £  Bn  can  be  expressed  in  algebraic  normal 
form  (ANF)  as 

f(xi,x 2. ....  xn)  =  /xa  I  xf  I  .  2»a  6  F2. 

a=(aj  .....aTl)6F2  \i—l  / 

The  ( Hamming )  weight  of  x  £  FI?  is  wt(x )  :=  x>-  The 

algebraic  degree  of  /,  deg(/)  :=  maxa6F"{wt(a)  :  /ia  f  ()}. 
Boolean  functions  having  algebraic  degrees  at  most  1  are  said  to 
be  affine  functions .  For  any  two  functions  /.  g  £  Bn,  we  define 
the  {Hamming)  distance  d(f ,  g)  =  |{x  :  /(x)  f  g(x).x  £ 

2  }  I  - 

The  Walsh-Hadamard  transform  of  /  £  Bn  at  any  point  u  £ 
FI?  is  defined  by 

Hf{ u)  =  2-?  ^3  (_1)/(*)ffiu-xi 
xGFJ 

Similarly,  the  Fourier  transform  of  /  £  B„  at  any  point  u  £  FI? 
is  defined  by 

/( u)  =  £  (-1)/(X)0U'X. 

xcfj 

A  function  /  £  Bn  is  a  bent  function  if  |?fj(u)|  =  1  for 
all  A  £  FI? .  Bent  functions  (defined  by  Rothaus  [19]  more  than 
30  years  ago)  hold  an  interest  among  researchers  in  this  area 
since  they  have  maximum  Hamming  distance  from  the  set  of  all 
affine  Boolean  functions.  Several  classes  of  bent  functions  were 
constructed  by  Dillon  [8],  Dobbertin  [9],  Rothaus  [19],  and  later 
by  Carlet  [2]. 

The  sumCj^(z)  =  X^xeF"  (  —  1)^X)®9(X0Z)  is  the  crosscor¬ 
relation  of  /  and  g  at  2.  Taking  f  —  g  above,  we  get  the  auto¬ 
correlation  Cf{ u)  of  /  £  Bn  at  u  £  F” .  It  is  known  [6]  that  a 
function  /  £  B„  is  bent  if  and  only  if  C/( u)  =  0  for  all  u  f  0. 

For  a  detailed  study  of  Boolean  functions,  we  refer  to  [3],  [4], 
and  [6]. 


The  nega-Hadamard  transform  of  /  £  Bn  at  any  vector  u  £ 
F/  is  the  complex  valued  function: 

A/}( u)  =  2^  ]T  (_i)/(x)ffi«-x^t(x)_ 
xgfj 

A  function  /  on  Fj  is  said  to  be  negabent  if  the  nega-Hadamard 
transform  is  flat  in  absolute  value,  namely  |A/(u)  =  1  for  all 
u  £  Fj.  The  sum 

C/iS( z)  =  ^  (-l)/(x)®9(xffiz)(-l)x'z 

xGF^ 

is  the  nega-crosscorrelation  of  /  and  g  at  z.  We  define  the  nega- 
autocorrelation  of  /  at  u  £  F£  by 

cf(  u)  =  53  (-i)^x)®^x®u)(-i)x-u. 

xffj 

The  negaperiodic  autocorrelation  defined  by  Parker  and  Pott 
[16]  is 

n,  g  (u)  =  £  (_1)/(X)©/(X®U)(_1)™AU)(_1)X-U. 
xgfj 

However,  the  difference  between  the  aforementioned  two  defi¬ 
nitions  is  not  critical  and  both  definitions  can  be  used. 

A  Boolean  function  is  said  to  be  symmetric  if  inputs  of  the 
same  weight  produce  the  same  output,  i.e.,  /(x)  =  /(tr(x)), 
for  any  permutation  a. 

The  group  of  all  invertible  n  x  n  matrices  over  F2  is  denoted 
by  GL(n ,  F9).  Two  Boolean  functions  f,gE  Bn  are  said  to  be 
equivalent  if  there  exist  A  £  GL(n,  F2),  b,  u  £  F£  and  c  £  F2 
such  that  g(x)  =  /(xdffib)ffiu-x©e  for  all  x  £  F” .  Ifu  =  0 
and  6  =  0,  then  /  and  g  are  said  to  be  affine  equivalent. 

B.  Quadratic  Boolean  Functions 

The  properties  of  quadratic  Boolean  functions,  that  is 
Boolean  functions  having  algebraic  degree  2,  can  be  found  in 
[15,  ch.  15].  If  /  is  a  quadratic  Boolean  function  on  n  variables, 
the  associated  symplectic  form  of  /  is  a  map  ip  :  x  F"  — >  F2 

defined  by 

^(u,  v)  =  /( 0)  ©  /( u)  ©  /(v)  ©  /( u  ©  v). 

The  kernel  £g  of  ip  is  defined  as 

£f  =  {11  £  F?  :  for  all  v  £  F/  such  that  ^(u,  v)  =  0}. 

The  set  £f  is  a  subspace  of  F”  with  dimension  n  —  2 h  where 
2 h  is  the  rank  of  IP.  It  is  known  that  two  quadratic  functions  / 
and  g  are  equivalent  if  and  only  if  dim(£f)  —  dim(£g)[  15,  ch. 
15,  Th.  4].  We  recall  the  following  result  [1,  Prop.  Al], 

Proposition  1:  An  element  a  £  £  f  if  and  only  if  the  function 
Daf,  defined  as  Da/(x)  =  /(x)  ©  /(x  ©  a)  for  all  x  £  F£ ,  is 
constant.  The  subspace  £f  is  said  to  be  the  linear  kernel  of  /. 

Since  the  autocorrelation  spectrum  of  any  bent  function  is 
zero  at  all  points  except  at  u  =  0,  the  linear  kernel  of  any 
quadratic  bent  function  is  of  dimension  0.  Therefore,  by  [15, 
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ch.  15,  Th.  4]  and  Proposition  1,  all  quadratic  bent  function  are 
equivalent  to  each  other. 

Suppose  n  =  2p,  ir  :  F2  F2  is  a  permutation  and 
g  :  F2  —>  F2  is  any  Boolean  function.  Rothaus  proved  that 
a  Boolean  function  /  :  F2  x  F2  — >  F2  defined  by 

/(x,  y)  =  tt(x)  •  y  ©  g(x)  for  all  (x,  y)  e  Ff  x  Ff 

is  a  bent  function.  The  collection  of  bent  functions  of  this  type  is 
called  the  MM  class.  If7r  is  the  identity  permutation  andg(x)  = 
0  for  all  x  £  F2,  then  the  function  h(x,  y)  =  x-y  =  Ya= 1  xiVi 
for  all  (x,  y)  £  Ff  x  F2  is  a  quadratic  bent  function.  Thus,  any 
quadratic  bent  function  of  n  variables  is  equivalent  to  h,  which 
can  be  written  as  h(x)  =  Xa=i  xi'xp+i  (by  labeling  xp+i  — 
yi).  From  the  previous  discussions,  it  is  clear  that  if  /  €  Bn 
is  a  quadratic  bent  function,  then  there  exist  A  £  GL(n,  F2), 
b,  u  £  F2 ,  and  e  £  F2  such  that  h{x)  —  /(xA®b)ffiu-x®e. 

II.  Properties  of  the  Nega-Hadamard  Transform 

It  is  well  known  that  the  inverse  of  the  Walsh-Hadamard 
transform  7if(\)  of  /  £  Bn  is  given  by 

(-l)/(x)  =  2~?  E  ^/(u)(-l)xu  (1) 


(c)  If /i(x,  y)  =  /(x)©g(y),x,y  £  F?,  thenA/>09(u,  v)  = 
Mf(u)Ng(y). 

(d)  If  h(x)  =  f{Ax  ©  a),  then  A//(u)  = 

(  —  l)a'(Au)  iwt(a)  ,A/}(Au  ©  a),  where  A  is  an 
n  x  n  orthogonal  matrix  over  F2  (and  so,  AT  A  =  /„). 

(e)  Iff  £  Bn,g  £  Bk,  and  h{x,  y)  =  f{x)g( y),  then 
2^(u,v)  =  Aff(u)Agi{v)  +  uin  i~wt^  Ag0{\), 

.Agi(v)  +  AgQ  (v)  =  2'^c oki~wt(v\  where 

AoW  =  2y.,(y)=o(-1)y'V 

A.(V)  =  Ey,S,y,.,(-l)yV*""'yl. 

Moreover,  if  k  —  1,  2  =  A/y/(x)(u,  v)  —  (  —  l)u  *A/}( u)  + 
u),  25A/(y®i)/(x)  (u,  v)  =  A/}(u)  + 

Proof:  The  first  part  of  (a)  is  direct  from  the  definition  of 
the  nega-Hadamard  transform.  The  second  part  of  the  claim  (a) 
can  be  derived  from  [23,  Lemma  1],  since  Ao(u)  =  —  A/i(u)  = 
2~%Y1  (  —  l)u'y  =  ujn 

We  show  the  first  identity  of  (b)  (the  second  follows  by  sym¬ 
metry).  Since 

A/>(v)  =2-t  Y  (-1  )/(y)*y-v^t(y) 
yeFj 

Hg{ u©v)=2-^  Y  (-1)9(z)®z-("®v) 

zGFJ 


for  all  x  £  F™.  The  nega-Hadamard  transform  is  also  a  unitary 
transformation.  An  immediate  consequence  of  the  definition  of 
the  nega-Hadamard  transformation  of  a  function  /  £  Bn  in  [16] 
and  [18]  is  the  following. 

Lemma  2:  Suppose  /  £  B„ .  Then 

(_l)/(y)  =2-lr”'(y)  Y  -A//(u)(— 1)y'u  (2) 

mGFJ 

for  all  y  £  F2 . 

Next,  we  prove  a  theorem  that  gives  the  nega-Hadamard 
transform  of  various  combinations  of  Boolean  functions.  We 
shall  use  throughout  the  well-known  identity  (see  [15]) 


and  (see  [6,  p.  8J) 


E(-1)VX 


2n,  if  v  =  0 
0,  if  v  /  0 


we  obtain  (sums  are  over  F2 ) 
EvGF  ;JV/(v)«s(uffiv) 


(_l)/(y)©9(z)+v'(yffiz)©u-z  zu)*(y) 
^[_l)/(y)©9(z)©u-z  twt(y)  y~^[_^)v'(y©z 

y,z  v 


=  ^(-i)/(y)©9(y)©u-y^t(y)  =  2t_A/}®g(u). 
y 


wt(x  ©  y)  =  wt(x)  +  wt{ y)  —  2 wt{x.  *  y).  (3) 

Theorem  3:  Let  f.g.  h  be  in  Bn.  The  following  statements 
are  true. 

(a)  For  any  affine  function  fa.c(x)  =  a  •  x  ©  c  and  /  £  Bn, 

-/V/©ta,c(U)  =  (-1)C-A//(a®U)- 

Further,  c  (u)  =  (— l)c  ujn  j-“,t(a©u) .  in  particular, 
Af0(u)  =  -Afi(u)  =  w»  ,-“*(»),  and  jVhffii(u)  = 
— A'),(u),  u  £  F2,  where  0, 1  are  the  constant  0,  respec¬ 
tively,  1  functions,  and  ui  =  ^4  is  an  eighth  primitive 
root  of  1. 

(b)  If  h{x)  —  /(x)  ©  g(x)  on  F2 ,  then  for  u  £  F2 , 

Arh{u)  =  2-%  E  Arf{\)Ttg{\x  ©  v) 

vGFJ 

=  2“t  Y  Hf{v)Afg{ u©  v). 

■UFFJ 


Item  (c)  is  straightforward.  The  property  (d)  can  be  derived 
from  [16,  Lemma  2]  and  [23,  Th.  2],  It  is  to  be  noted  that  [23, 
Th.  2]  further  proves  that  the  action  of  the  orthogonal  group  pre¬ 
serves  the  bent-negabentness  property  of  a  Boolean  function. 
To  show  item  (e),  we  write,  2^^~ Afh( u,  v) 


—  Y^  [_i)/(x)9(y)®x'u©y'v  zwt(x)+wt(y) 

(x,y)6F"  +  fe 

_  Y^  [_ i)y,v  iwt(y)  y^(_i)/(x)©x-u 
y,g(y)=i  x 

+  E 

y,s(y)=o  x 

=  2*A/)(u)  E  (-l)y'v^t(y) 
y,s(y)=i 


/(x)®X-U  ?U!t(x) 


)yv  y) 


+  E  (-l)y'v 


y,s(y)=o 
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from  which  we  obtain  the  desired  identity.  Moreover,  if  k  =  1, 

and  g(y)  =  y,  then  Ag0(v)  =  l,Agl(v)  =  (-1  )v  i,  and  if 
g(y)  =  y®  l,then  Agl(v)  =  l,Ag0(v)  =  (-1)“*,  and  so 


2^A4/(x)(u,  v)  =  (-1)"  iAff( u)  +  wn 
2^(wel)/(x)(u,  v)  =  A/}(  u)  +  W"(-l )“  f"‘W+1. 


The  next  result  is  analogous  to  the  result  on  the  crosscorrela¬ 
tion  of  two  Boolean  functions  [20].  In  the  nega-Hadamard  trans¬ 
form  context,  the  basic  idea  of  this  result  is  explained  in  [7]  and 
[17,  eq.  (15)]. 

Lemma  4:  If/,  g  G  Bn ,  then  the  nega-crosscorrelation  equals 

]r 

u£F£ 

Proof:  We  start  with  the  sum  at  the  right  hand  side. 

^t(z)EueFJv/(u)V>)(-ir'z 

=  *-"£  E(-  ]  ^/(x)ffig(y)  lwt(x)-wt(y)+wt(z.) 

xGF” y£F£ 

x  (_  |  ^u-(x®y®z) 

uEF” 

=  £  (_1)/(*)fl9«(x®»)(_1)x-»  _  C/ifl(z). 

xEF™ 


If  we  take  /  =  g  in  the  previous  lemma,  then  we  obtain 

^2  gF„ (—  i)/(x)®/(xfflz)(_ i)x'z 

=  ^(z)  £  A/>(u)V7H(-1)U  Z 

u£FJ 

=  rt(z)  pv/(u)|2(-l)u'z.  (4) 

uefj 

This  is  an  analogue  of  the  autocorrelation  of  Boolean  functions. 
It  is  to  be  noted  that  since  both  Hadamard  and  nega-Hadamard 
transforms  are  unitary  they  are  energy  preserving  and  hence, 
Parseval’s  theorem  holds  for  both  transforms.  The  classical  Par- 
seval’s  identity  takes  the  form 

£(7f/(«))2  =  2" 

'iFFJ 

for  the  Walsh-Hadamard  transform.  Substituting  z  =  0  in  (4), 
we  obtain  a  proof  of  this  fact  for  the  particular  case  of  nega- 
Hadamard  transforms. 

Corollary  5  (Nega-Parseval  s  Identity):  We  have 

£  |A/}(u)|2=2".  (5) 

uSFJ 


Lemma  6:  A  Boolean  function  /  G  Bn  is  negabent  if  and 
only  if  Cf( z)  =  0  for  all  z  S  F"  \  {0}. 

Proof:  If  /  is  a  negabent  function,  then  | A/}  (u)  |  =  1  for 
all  u  G  F"  •  For  all  z  /  0,  then  by  (4),  we  obtain  Cf(  z)  =  0. 
The  converse  also  follows  from  (4).  ■ 

An  equivalent  result  is  proved  after  [17,  eq.  (15)]  and  in  [16, 
Th.  2]  for  the  negaperiodic  autocorrelation. 


Remark  7:  Lemma  6  provides  an  alternate  characterization 
of  negabent  functions. 

If  /  is  an  affine  function,  then  for  all  z  G  F£  \  {0}  the  nega- 
autocorrelation  C/(z)  =  0.  This  implies  that  any  affine  function 
is  negabent.  For  other  proofs,  we  refer  to  [23,  Lemma  1]  and 
[16,  Prop.  1].  A  bound  on  the  algebraic  degrees  of  negabent 
functions  is  an  important  question.  In  the  following,  we  provide 
such  a  bound. 

A  Boolean  function  /  G  Bn  is  said  to  be  near-bent  [12]  if 
its  Fourier  transform  values  belong  to  {().  ±2t“ }.  It  is  rather 
immediate  that  near-bent  functions  exist  only  for  odd  values  of 
n.  It  is  known  [3]  that  if  /  is  an  n  variable  Boolean  function 
(n  >  2)  and  1  <  k  <  n  such  that  the  Fourier  transform  values 
of  f  are  divisible  by  2fc,  then  /  has  algebraic  degree  at  most 
n  —  k  +  1.  In  case  /  is  near-bent,  k  =  which  implies  that 
the  algebraic  degree  of  /  is  at  most  . 

The  following  theorem  (which  will  be  also  used  later)  proved 
by  Parker  and  Pott  establishes  a  connection  between  bent  and 
negabent  functions. 

Theorem  8  (see  [16,  Th.  12]):  A  function  /  :  F2m  — > 
F2  is  negabent  if  and  only  if  /  ©  s2  is  bent,  where 
s2{x1,x2,...,X2m)  =  J2i<jxixj  is  the  elementary  sym¬ 
metric  function  of  degree  2. 

Theorem  9:  The  algebraic  degree  of  a  negabent  function  /  G 
B„  is  at  most  [([],  for  any  integer  n. 

Proof:  Suppose  n  is  even  and  /  is  negabent.  Then  /  ©  .s2 
is  bent,  and  so,  its  algebraic  degree  is  bounded  above  by  |, 
therefore  the  algebraic  degree  of  /  is  at  most  | . 

Suppose  n  is  odd  and  /  G  Bn  is  a  negabent  function.  Then, 
by  [16,  Remark  1],  the  Walsh-Hadamard  transform  values  of 
/©s2  belong  to  {0,  ±2^  },  in  other  words  /©s2  is  a  near-bent 
function.  Therefore,  the  algebraic  degree  of  /  is  at  most  .  ■ 

111.  Decomposition  of  Negabent  Functions  With 
Respect  to  Codimension  One  Subspaces 

Suppose  1  <  r  <  n.  Then,  any  function  /  G  Bn  can  be 
thought  of  as  a  function  from  F2  x  F™  r  to  F2.  For  any  fixed 
v  G  Fj,  the  function  /v  G  Bn_r  is  defined  as  /v(x)  =  /(v,  x) 
for  all  x  G  FITF 

Theorem  10:  Let  /  G  Bn  be  expressed  as  /  :  F^  x  Fr)~T  — > 
F2.  Then 


C'/(U:W)=  £  C/v,/vfflu(w)(-!)V-U. 


v£Fr 


Proof:  By  definition,  C/(u,  w) 

=  £  E  (_q]/(v'z)®/(v®u'z®w)  (_  l)v'u©z'w 

v£FJ  zgFJ^'' 

=  E 


v£Fr 


=  E  (w)(—  1)V  U- 


(6) 


veFr 
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Corollary  11:  Suppose  /  G  Bn  is  expressed  as 
/(xj  y)  —  /o(x)(l  ©  y)  ©  fi{x)y,  for  all  (x,  y)  £  F^1  x  F2, 


Proof:  We  show  first  (1)  (2).  Suppose  h  is  a  negabent 

function.  Then  Ch{ u,  a)  =  0  for  all  nonzero  (u,  a)  £  FI,'  x  F2. 
From  Corollary  11,  we  obtain 


where  f0,  f i  £  Bn-i-  Then 


Ch(u,0)  =  Cf(  u)  +  Cg(u)  =  0 


cf( w,0)  =  C/o( w)  +  Cfo  (w) 
C/(w,l)=Cfti/l(w)  -  (-!)“*(*)  C/oi/i(w). 


The  functions  /  and  g  are  said  to  have  complementary  nega- 
autocorrelation  if  for  all  nonzero  u  £  F2 

G/(U)  +  Cg{  U)  =  0. 

The  following  lemma  establishes  a  connection  between  the 
nega-autocorrelations  of  f,  g  and  their  nega-Hadamard  trans¬ 
formations. 

Lemma  12:  Two  functions  /,  g  £  Bn  have  complementary 
nega-autocorrelations  if  and  only  if 

|A// (u) | 2  +  |A4(u)|2  =  2  for  all  u  £  F2  . 

Proof:  Let  /,  g  be  two  functions  with  complementary 
nega-autocorrelations.  Then 

|V/(u)|2  +  |Yg(u)|2 

=  2-  £  i-^\Cf(z)  +  Cg(z))(-ir" 

zeFj 

=  2~r‘2n+1  =  2. 

Conversely,  suppose  |A/}(u)|2  +  ^(u))2  =  2  for  all  u  £  F2 . 
Then,  Cf(z)  +  Cg( z) 


for  all  u  £  F2  \  {0}  and 


Ch(u,l)  =  Ca^-(-l)Wt{U})  =  0; 

which  implies  Cf  g(u)  =  0  for  all  u  £  F2  with  wt(u)  =  1 
(mod  2). 

Conversely,  assume  that  the  functions  /  and  g  have  comple¬ 
mentary  nega-autocorrelations  and  Cf,g( u)  =  0  for  all  u  £  F2 
with  wt (u)  =  1  (mod  2).  Then  by  Corollary  11,  Ch(u.a)  = 
0  for  all  nonzero  (u,  a)  £  F2  x  F2.  This  implies  that  h  is  a 
negabent  function. 

We  now  show  (1)  -£=>  (3).  The  nega-Hadamard  transform 
of  h  at  (u,  a )  £  F2  x  F2  is 
A4(u.  a) 


=  2 


E 


x,y)ffiu-x®aj/  wt(x..y ) 


(x.y)eFJ  XF2 


=  2-^  E  (-!)/(> 


)®u-x  iut(x) 


x£Fj 

1  +  1 


+  2-^  E(-D 


g(x)®u-x®a  u,t(x)  +  l 


xGFJ 


=  ^^(u)  +  *(-L°^-vg(u). 


Thus 


=  *^(z)  'Emw\2  +  wg{*)\2)(-ir 

uGFJ 

=  2 iwtW  E  (-!)uz  =  2n+Vt(z)6o(z) 

uGF^ 


where 


A/h( u.  a) 


75-V/(  u)  +  ^Afg(u),  if  a  =  0 
-  ^V9(u),  if  a  =  1. 


Since  h  is  negabent  \Afh(u,  a)|  =  1  for  all  (u.  a)  £  F2  x  F2 
we  obtain 


5o(z) 


0,  if  z  ^  0 
1,  ifz  =  0. 


Thus,  the  functions  /  and  g  have  complementary  nega-autocor¬ 
relations.  ■ 

Theorem  13:  Suppose  h  £  Bn+ 1  is  expressed  as 


^A>( u)  +  ^A/g(u) 

-Lw(u)  -  -Vv,(u) 


=  1 

=  1. 


(8) 


If  h,  is  negabent,  then  by  Lemma  12  and  the  equivalence  of  the 
first  two  statements  proved  above,  we  obtain 


y)  =  /(x)(!  ©  y)  ©  g{x)y  for  all  (x,  y)  £  F2  x  f2 

where  f,gEBn.  Then,  the  following  statements  are  equivalent. 

1)  h  is  negabent. 

2)  /  and  g  have  complementary  nega-autocorrelations  and 
Cftg( u)  =  0  for  all  u  £  F2  with  wt( u)  =  1  (mod  2). 

3)  |A/}(u)|2  +  |A/g(u)|2  =  2  for  all  u  £  F2  and  is  a 

real  number  whenever  |A/(u)  l-Vg(u)|^0. 


|A//(u)|2  +  |Wg(u)|2  =  2  for  all  u  £  F2  . 

Suppose foru  £  F2,  |A/}(u)||W9(u)|  O.Letzi  =  ^A//(u) 
and  z2  =  ^Vg(u).  Then,  by  (8),  we  obtain 

\zi  +  z2|2  =  \%i  ~  ^2 12,  that  is 

zizf  =  -  zfzf. 


STANICA  et  al. :  INVESTIGATIONS  ON  BENT  AND  NEGABENT  FUNCTIONS  VIA  THE  NEGA-HADAMARD  TRANSFORM 


4069 


for  all  x  E  F2  2  ■  Thus,  if  h  is  a  negabent  function  and  sym¬ 
metric  with  respect  to  the  variables  y  and  a,  then  it  is  of  the  form 

Mx,  V,  z)  =  /(x)  ©  (/(x)  ©  <?(X))U  ©  z),  for  all  (x,  y,  z)  E 
F2~2  x  F2  x  F2.  The  nega-Hadamard  transform  A// (u,  a.  b)  of 
h  at  (u,  a,  b)  E  F2~2  x  F2  x  F2  is 


Therefore,  we  have  A//(u)7Vg(u)  =  A/g(u)A//(u),  i.e., 

AAf(u)  _  Jf  f  (u)  _  /  Aff  (u)  \  T,  .  tunt  -A/>(u)  •  | 

"  TO  “  '  lhlS  proves  that  W)  18  3  real 

number. 

Conversely,  suppose  |A//(u)|2  +  |jV’g(u)|2  =  2forallu  S  F2 
and  is  a  real  number  whenever  |,V}(u)||A/’g(u)|  0. 

Without  loss  of  generality,  we  may  first  assume  Aff( u)  =  ^  (-l)/(3 

0,  for  some  u  E  F2.  Then,  by  the  aforementioned  condition, 

|Vg(u)  =  \f2.  By  (7),  |A/fe(u,  o,)|  =  1  for  all  a  E  F2.  Next 

we  consider  the  case  when  |A/}(u)||A/g(u)|  f  0.  Let  <j>(u)  =  where  (x,  y,  z)  varies  over  FI,1-2  x  F2  x  F2.  Expanding  the 
AM")  xhen  above  sum  by  substituting  all  possible  values  of  (y,  z)  E  F2  x 

A/'/(u)'  F2,  we  obtain 


:)®(/(x)©s(x))(j/©z)-|-u-x©oi/®62  %wt{x.,y,z) 


|A4(u,a)|2  =  |-^=7V7(u)  +  *(-l)a-^=0(u)A/>(u)|2 

=  i|^(u)|2|l  +  *(-imu)r2 

=  ^|V/(u)|2(l  +  |0(u)|2) 

-  1\\r  full2  (l  I 

-2'A^(U)'  l1+RKu)P 


=  +  |Vg(u)|2)  =  1. 


(9) 


Thus,  h,  is  negabent. 


IV.  Negabent  Functions  Symmetric  About  Two 
Variables 

Suppose  h  E  B„  is  a  Boolean  function  which  is  symmetric 
with  respect  to  two  variables,  y  and  3  say.  Then  there  exist  func¬ 
tions  f,  g,  s  E  B„_2  such  that 


h{x-,  y ,  z)  =  /(x)  ®  (/(x)  ®  g(x)){y  ®  z)  ®  s(x)yz  (10) 


for  all  ( x,y,z )  E  F21-2  x  F2  x  F2.  The  Boolean  function  h 
is  bent  if  and  only  if,  /  and  g  are  bent  and  s(x)  =  1  for  all 
x  E  F2 _2  (see  [3],  [4],  [6],  and  [26]).  For  negabent  functions 
we  prove  the  following  similar  result. 


Theorem  14:  Suppose  h  E  B„  is  expressed  as  h(x,  y,  z)  = 
/(x)®(/(x)©<7(x))(?y®2:)®s(x)y2  for  all  ( x,y,z )  E  F2-2  x 

F2  x  F2.  The  Boolean  function  h  is  negabent  if  and  only  if  / 
and  g  are  negabent  and  ,s(x)  =  0  for  all  x  E  F2 . 

Proof:  The  nega-autocorrelation  of  h  at  (0, 1, 1)  is 

Gh(0,l,l) 


=  E  E  £(  _2)s(x)(1®y®z)(_i)y®z 

xeFj-2  #eF2 zeF2 

=  ^  (_l)s(x)  ^2  ( _ l)s(x)y®3/  ^  (_-gs(x)z®. 

xeFJ~2  y6F2  z6F2 

=  E  (-i)s(x)  E  (-i)s(x)i/®a(i  +  (-i)s(: 


xeFr2 


y£F2 


=  2  E  (-i)E(-1)°  =  4  E  (-1) 

x6F"_2,s(x)=i  yeF2  xeF/~2,s(x)=i 

=  — 4|{x  E  F2-2  :  s(x)  =  1} | - 


If  h  is  a  negabent  function  then  C7,  (0. 1, 1)  =  0.  Therefore 
{x  E  F2~2  :  s(x)  =  1 } |  =  0,  which  implies  that  s(x)  =  0 


1  _  f-Daffifi  (-1)“  +  (-1)6 

Afh(u,  a ,  b )  =  - - - A/}(u)  +  i- - - - —  A/g(u). 

(ID 

Therefore,  2V/(u,  a,  6)  E  {A//(u).  ±VVg(u)}  for  all  (u,  a.  b)  E 
F2~2  x  F2  x  F2.  This  proves  that  both  /  and  g  are  negabent.  On 
the  other  hand,  if  /  and  g  are  negabent  functions,  and  s(x)  = 
0  for  all  x  E  F2~2,  then  h  is  also  negabent.  This  shows  the 
converse.  ■ 

Corollary  15:  A  symmetric  negabent  function  is  affine. 

Proof:  Let  h  E  Bn  be  a  symmetric  negabent  function.  Let 
us  suppose  that  h  has  algebraic  degree  greater  than  or  equal  to 
2.  Since  h  is  symmetric,  it  is  symmetric  with  respect  to  any  two 
variables.  Therefore,  it  is  possible  to  express  h,  for  at  least  one 
pair  y ,  z  of  variables,  as  follows: 

Mx,  V,  z)  =  /(x)  ©  (/(x)  ©  5(x))(i/  ©  z)  ©  s[x)yz 

where  s(x)  f  0  for  at  least  one  x  E  F2~2.  But  this  contradicts 
the  fact  that  h  is  negabent.  Hence,  all  symmetric  negabent  func¬ 
tions  are  affine.  ■ 

The  result  of  Corollary  15  gives  an  alternate  proof  of  the  fact 
proved  in  [21],  In  fact,  the  case  for  even  n  can  be  immediately 
obtained  from  Theorem  8. 

Recall  that  s2(xi,  x2,  ■  ■  . ,  i2m)  =  Xu<y  xixi  *s  the  homo¬ 
geneous  (i.e.,  all  terms  of  its  ANF  are  of  the  same  degree),  sym¬ 
metric  and  quadratic  bent  function.  Let  si(xi,  x2,  ■  ■  ■ ,  x2m)  = 
Xi,  the  (only)  symmetric  linear  function.  In  [22],  it  is  shown 
that  the  only  symmetric  bent  functions  are  s2,  s2  ®  si,  1  ffi  s2, 

1  ©  S2  ffi  Si . 

In  [21],  it  is  proved  (by  a  long  argument)  that  all  the  sym¬ 
metric  negabent  functions  are  affine.  Following  [16]  and  [22], 
the  result  in  [21]  can  be  achieved  in  a  few  lines  for  even  n. 

Theorem  16:  Let  n  be  even.  A  symmetric  function  /  E  Bn 
is  negabent  if  and  only  if  it  is  affine. 

Proof:  Suppose  /  E  Bn  is  a  symmetric  negabent  function. 
Then  /  ffi  s2  is  a  bent  function.  Since  the  direct  sum  of  two 
symmetric  functions  is  symmetric,  then  /  ©  s2  is  a  symmetric 
bent  function.  The  only  symmetric  bent  functions  are  s2,  s2©si, 
1  ffi  s2, 1  ©  s2  ffi  si  (see  [22]).  Therefore,  /  can  be  0,  1,  si,  1  ffisi 
and  nothing  else.  This  proves  that  if  /  is  a  symmetric  negabent 
function  on  even  number  of  variables,  then  it  is  affine. 

Conversely,  it  is  known  that  all  affine  functions  are  negabent 
[23].  Therefore,  symmetric  functions  on  even  number  of  vari¬ 
ables,  if  affine,  are  negabent.  ■ 
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Bent  functions  do  not  exist  for  an  odd  number  of  input  vari¬ 
ables.  Thus,  there  is  no  equivalent  characterization  of  Theorem 
8  for  odd  dimension,  and  the  result  in  [21]  cannot  be  proved 
trivially  as  before.  However,  the  odd  (as  well  as  the  even)  case 
has  already  been  taken  care  of  by  Corollary  15. 

V.  Bent-Negabent  Functions  in  MM  Class 

In  this  section  we  shall  investigate  bent  functions  which  are 
also  negabent  in  the  MM  class  of  bent  functions,  namely 

/(x,  y)  =  tt(x)  •  y  ©  g(x),  x,  y  £  F^  (12) 

where  7r  is  a  permutation  satisfying  wt(x  ©  y)  =  wt( 7r(x)  © 
7r(y))  (we  call  7r  a  weight-sum  invariant  permutation),  for  all 
x.  y,  and  g  is  an  arbitrary  Boolean  function,  both  on  F2 .  We 
remark  that  if  7r  is  orthogonal,  that  is,  7r(x)  =  A  •  x  with  A 
orthogonal  (ATA  =  /,,),  then  it  satisfies  the  imposed  condition 
(since  iyi(7r(x)®7r(y))  =  wt(A(x(By)),  it  suffices  to  show  that 
wt(Az)  =  wt{ z);  for  that,  consider  wt(Az)  =  (Az)T  ■  (Hz)  = 
zt(HtH)z  =  wt( z)).  It  could  be  interesting  to  see  if  there 
are  such  weight-sum  invariant  permutations  outside  of  the  ones 
generated  by  the  linear  orthogonal  group. 

Theorem  17:  A  function  in  (12)  on  F|"  is  bent-negabent  if 
and  only  if  g  is  bent. 

Proof:  We  evaluate  A/}( u,  v) 

_  2~n  (_l)’r(x).y®fl(x)ffix.u®y.vl«,t(x)+u,t(y) 

(x,y)GF|" 

|fl'(x)©X-U  E  (_l)7r(x)-y©y-v  ^‘(y) 

xGFJ  y GFJ 

_  (_i)s(x)fflx-u  zu,t(x)2f  ujn  z~u,t(7r(x)@v) 

xgFJ 

=  2  ~^U}n  'y  '  (_  ]^s(x)©xu  JnJt(x)-iut(7r(x)ffiv) 

X£FJ 

Now,  using  the  fact  that  7r  is  a  weight-sum  invariant  permu¬ 
tation,  and  by  (3),  we  obtain 

wt(n(x)  ©  v)  =  wt(x  ©  7T_  1  ( v)) 
wt(x)  —  wt( 7r(x)  ffi  v) 

=  — wf(7r_1(v))  +  2 wt(x  *  7r —  1  ( v)) ,  and 

^2u;t(x*7r_1  (v))  _  ^ _ ^x-7r_1(v) 

which  implies  that  A//(u,  v) 

=  2 z~u’t(7r_1(v))  ( _ i ^9(x)0x-(u07r— 1  (v)) 

xGFJ 

=  Ujn  u  ©  7T  1  (V)) . 

Consequently 

|7V>(u,v)|  =  |W9(uffi7T-1(v))| 
that  proves  our  claim.  ■ 

The  following  corollary  follows  easily  from  our  theorem, 
since  bent  functions  exist  for  any  degree  up  to  half  of  the  (even) 
dimension.  We  remark  that  [23,  Th.  10]  gives  an  upper  bound 


of  n  —  1  on  the  degree  of  an  MM-type  bent-negabent  function 
on  2 n  variables,  but  not  an  existence  result. 

Corollary  18:  If  /  as  in  (12)  is  bent-negabent  with  7r 
weight-sum  invariant,  then  the  degree  of  /  is  bounded  by  'f. 
Moreover,  there  exist  bent-negabent  functions  in  the  MM  class 
of  any  degree  between  2  and  |  ( n  is  even). 

VI.  Construction  of  a  New  Class  of  Bent-Negabent 
Boolean  Functions 

It  is  well  known  that  the  maximum  degree  of  a  bent  function 
on  n  variables  is  ^  and  the  maximum  degree  of  a  negabent 
function  is  [  ”  ]  (Theorem  9),  which  is  ”  for  even  n.  Thus,  it  may 
be  an  interesting  problem  to  find  out  a  nontrivial  upper  bound  on 
the  algebraic  degrees  of  the  bent-negabent  functions.  However, 
no  upper  bound  strictly  less  than  ”  is  known  to  this  date.  Parker 
and  Pott  also  raised  this  question  in  [16,  Problem  3,  p.  19]. 

So  far  all  the  known  general  constructions  of  bent-negabent 
functions  on  n  variables  produce  functions  with  algebraic  de¬ 
grees  less  than  or  equal  to  ” ,  where  n  is  any  positive  integer 
divisible  by  4.  In  this  section,  we  construct  bent-negabent  func¬ 
tions  on  n  =  121  variables  with  algebraic  degree  equal  to  ”  + 1 , 
where  t  is  any  positive  integer  greater  than  or  equal  to  2. 

Throughout  this  section,  n  =  2p  and  h  is  a  quadratic 
bent  function  defined  as  h,(x)  =  Xa=i  xixv+i  f°r 

x  =  (xi, . . .  ,xn)  £  F".  It  is  known  that  the  quadratic 
symmetric  Boolean  function  of  the  form  S2(x)  =  J2i<j  xixj > 
for  all  x  =  (xiy. . . ,  xn)  E  F"  is  bent.  Therefore,  by  the  results 
of  Section  I-B,  the  function  S2  is  equivalent  to  the  quadratic 
bent  function  h  defined  previously.  Using  Theorem  8,  proved 
by  Parker  and  Pott,  we  obtain  the  following. 

Lemma  19:  A  Boolean  function  /  E  Bn  (n  =  2p)  is  bent-ne¬ 
gabent  if  and  only  if  both  /  and  /  ©  S2  are  bent  functions. 

Proof:  Assume  that  /  £  B^p  is  a  bent-negabent  function. 
Since  /  is  a  negabent  function,  /  ©  s2  is  a  bent  function.  Thus, 
/  and  /  ©  s 2  both  are  bent  functions. 

Conversely  let  us  suppose  that  /  and  /  ©  s2  both  are  bent 
functions.  Since  /  ©  S2  is  a  bent  function  /  ©  S2  ©  «2  =  /  is  a 
negabent  function.  Therefore,  /  is  a  bent-negabent  function.  ■ 

The  following  theorem  provides  a  strategy  to  construct 
bent-negabent  functions. 

Theorem  20:  Lets2(x)  =  ft(xHffib)©u-x©e  for  all  x  £  Fj, 
where  A  e  GL(n,  F2),  b,  u  £  F£  and  e  £  F2.  Suppose  /  £  Bn 
is  a  bent  function  such  that  /  ©  h  is  also  a  bent  function.  Then, 
g  E  Bn  defined  by 

5(x)  =  /(xH©b)©(i(xH©b)©u  •  xffie  =  /(xd©b)ffis2(x) 

for  all  x  £  F"  is  a  bent-negabent  function. 

Proof:  The  function  g  is  equivalent  to  /  ffi  h.  Therefore,  g 
is  bent.  The  function  g  ffi  s2  is  affine  equivalent  to  /.  Since  / 
is  a  bent  function,  g  ffi  s2  is  also  a  bent  function.  Therefore,  by 
Lemma  1 9,  g  is  a  bent-negabent  function.  ■ 

Remark  21:  Since  all  quadratic  bent  functions  are  equivalent 
(see  Section  I-B),  if  hi  is  any  quadratic  bent  function  on  n  vari¬ 
ables,  then  there  exist  A  E  GL(n,  F2),  b.  u  £  FJ  and  e  £  F2, 
such  that  s2(x)  =  h\{xA  ffi  b)  ffi  u  •  x  ffi  e  for  all  x  £  F£. 
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Therefore,  if  /  £  Bn  is  a  bent  function  and  hi  £  Bn  is  any 
quadratic  bent  function  such  that  f  +  h  i  is  also  a  bent  function, 
then  by  using  the  strategy  described  in  Theorem  20  we  obtain  a 
bent-negabent  function. 

Theorem  20  reduces  the  problem  of  constructing  bent-ne¬ 
gabent  functions  to  characterizing  bent  functions  /  such  that 
f  +  h  is  also  a  bent  function.  We  demonstrate  below  that  such 
functions  can  be  constructed  by  using  complete  mapping  poly¬ 
nomials. 

A.  Complete  Mapping  Polynomials 

Let  F 2p  be  the  field  extension  of  F2  of  degree  p.  The  finite 
field  F2P  is  isomorphic  to  F2  as  a  vector  space  over  F2.  Any 
permutation  of  F2P  can  be  identified  with  a  permutation  on  F2. 
Any  permutation  on  F2P  can  be  represented  by  a  polynomial 
in  F2P[A]  of  degree  at  most  2P  —  2.  A  polynomial  F( X)  £ 
F2p  [A"]  is  said  to  be  a  complete  mapping  polynomial  if  F( X) 
and  F(X)  +  X  both  correspond  to  permutations  on  F2p.  For 
details  on  complete  mapping  polynomials,  we  refer  to  [11]  and 
[14].  The  following  provides  us  a  strategy  to  construct  bent-ne¬ 
gabent  functions  by  using  complete  mapping  polynomials. 

Theorem  22:  Let  n  =  2 p.  Suppose  np  denotes  the 
permutation  on  F2  induced  by  a  complete  mapping  poly¬ 
nomial  F(X)  £  F2p[A"].  Let  fp  £  Bn  be  defined 

by  f F  (x)  =  . . .  ,xp)  ■  (xp+ x„)  for  all 

x  £  F",  and  h  is  a  quadratic  bent  function  defined  as 

h(x)  =  X^=i  xixp+i  for  all  x  =  (x\, . . .  ,xn)  £  F2,  such 
that  s2(x)  =  h{xA  ©  b)  ©  u  •  x  0  e  for  all  x  £  F2,  where 
A  £  GL(n,  F2),  b.u  £  F2  and  e  £  F2.  Then,  the  Boolean 
function  fp  ©  h  is  an  MM-type  bent  function  and 

g(x)  =  Jf(xA  ©  b)  ©  h(xA  ©  b)  ©  u  •  x  ©  e 
=  ,/>(xA  ©  b)  ©  s2(x)  for  all  x  £  F” 


positive  integer  coprime  to  q  —  1.  Assume  a  £  Fpke  is  such  that 
(— a)rn  F  1.  Then,  the  polynomials 

P(X)  =  X(X +  a)  and  Q{X)  =  aX^+1 

are  complete  mapping  polynomials. 

First,  we  construct  a  bent-negabent  function  on  24  variables 
having  algebraic  degree  7. 

Example  24:  Following  the  notations  of  Theorem  23,  letp  = 
2,  l  =  2,  and  m  =  3.  The  order  of p  in  Z/3Z  is  2,  that  is  k  =  2. 
Thus,  klm  =  (2) (2) (3)  =  12  and  q  =  pklm  =  212.  Consider 
the  polynomial  P( X)  =  A(AT2^-  +a)  =  A(A1365+a),  where 
a  £  F24  \F2a .  The  last  condition  guarantees  (—a)"'  =  (—a)3  F 
1.  By  using  P(X)  in  Theorem  22,  we  obtain  a  bent-negabent 
function  on  24  variables  and  algebraic  degree  7.  The  algebraic 
degrees  of  the  bent-negabent  functions  constructed  in  [23]  are 
bounded  above  by  f.  Thus,  the  bent-negabent  function  con¬ 
structed  above  does  not  belong  to  these  classes. 

Certainly,  the  order  ofp  =  2  in  Z/3Z  is  k  =  2,  so  in  general 
we  have  the  following  result. 

Lemma  25:  For  any  i  >  2,  the  polynomials 

26£_i  26£-l 

P{X)  =  X{X^r~  +  a)  and  Q(X)  =  a,X^~+1 


have  algebraic  degree  31. 


201-1 


Proof:  Let  t  =  3 

2u  _  1 


+  1.  Then 


t  = 


1 


(22  -  1)((22)3«-1  +  (22)3«-2  +  ■  ■  •  +  (22)  +  1) 
~  (2^1) 

_ 2<o£ — 2  _|_  2®^ — ^  ®  j  j  2*^  _|_  2^  -(-  2 

_ - - - _ — v - - - 1 - 

3£  terms 


+ 1 


is  a  bent-negabent  function.  The  algebraic  degrees  of  g  and  fp 
are  equal. 

Proof:  Since  np  is  a  permutation  on  FI/,  the  function  fp  is 
a  bent  function  on  n  =  2 p  variables  belonging  to  the  MM  class. 
The  function 

Uf  ©  h){x)  =  fF{x)  ©  h{x) 

F  P  fxi ,  .  .  .  ,  Xpf  ■  (Xp-j-i ,  .  .  .  ,  Xjff 

©  (x‘i ,  .  .  .  ,  Xp  )  •  /xppl .....  xn) 

=  (7TF(xi,  ...,Xp) 

©  (x‘i ,  .  .  .  ,  Xp ) )  •  . ... .  xnf 

is  also  a  bent  function  in  the  MM  class  since  np  is  induced  from 
a  complete  mapping  polynomial.  Thus,  using  Theorem  20,  we 
infer  that  g  is  a  bent-negabent  function.  ■ 


This  proves  that  both  P(X)  and  Q(X)  have  degree  31.  ■ 

Theorem  26:  For  each  t  >  2,  there  exist  bent-negabent  func¬ 
tions  on  n  —  12Z  variables  with  algebraic  degree  ^  +  1  =  3Z+1. 

Proof:  For  each  £  >  2,  it  is  possible  to  construct  P( X) 
and  Q(X)  as  in  Lemma  25  with  p  —  2  and  m  =  3.  It  is 
proved  in  Lemma  25  that  P(X)  and  Q(X)  both  have  alge¬ 
braic  degree  31.  It  is  also  to  be  noted  that  if  t  >  2,  we  can 
choose  a  £  F22 1  \  F2  so  that  (— a)m  ^  1.  Therefore,  P(X) 
and  Q( X)  constructed  in  this  way  are  complete  mapping  poly¬ 
nomials.  If  we  use  Theorem  22  by  inducing  the  permutation  7 ip 
where  F{ X)  £  {P( A).  Q(X)},  then  we  obtain  bent-negabent 
functions  on  n  =  (2)(6Z)  =  12£  variables  with  algebraic  de¬ 
gree  31  +  1.  It  is  also  to  be  noted  that  these  functions  may  not 
be  of  MM  type  but  belong  to  the  complete  class  of  MM-type 
functions.  ■ 


B.  Bent-Negabent  Functions  on  n  Variables  With  Algebraic 
Degree  Greater  Than  j 

We  consider  a  particular  complete  mapping  polynomial  con¬ 
structed  by  Laigle-Chapuy  [11], 

Theorem  23  ([11,  Th.  4.3]):  Let  p  be  a  prime  and  ( m,l )  £ 
N2.  Let  k  be  the  order  of  p  in  Z/mZ.  Take  q  =  pkem  and  r  a 


Complete  mapping  polynomials  over  F24  of  algebraic  de¬ 
grees  1,  2,  and  3,  listed  in  Table  I,  are  obtained  by  Yuan  et  al. 
[25].  In  Table  I,  a  denotes  a  primitive  element  of  F24.  Using 
these  polynomials  and  Theorem  22  we  can  construct  bent-ne¬ 
gabent  functions  on  eight  variables  having  algebraic  degrees  2, 
3,  and  4.  Thus,  we  note  that  there  exist  bent-negabent  functions 
on  eight  variables  with  maximum  possible  algebraic  degree  that 
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TABLE  I 

Complete  Mapping  Polynomials  Over  F24 


Algebraic  degree 

Complete  mapping  polynomial 

1 

a(x4  +  bx)  where  ab  ^  0, 
and  b,  b  +  a-1  7^  a3,  a6,  a9,  a12 

2 

a4xw  +  a^x^1  +  a^x^  +  a'x4  +  a4x 

3 

a14  xLA  +  +  a'x'  +  ofix 

is  4.  It  is  not  known  whether  such  is  the  case  for  n  >  4.  This 
leads  us  to  state  the  following  as  an  open  problem. 

Open  Problem:  For  any  n  =  0  (mod  4),  give  a  general 
construction  of  bent-negabent  Boolean  functions  on  n  variables 
with  algebraic  degree  strictly  greater  than  j  +  1. 

VII.  Conclusion 

In  this  paper,  we  have  investigated  the  nega-Hadamard  trans¬ 
form  of  Boolean  functions  in  detail.  First,  we  study  the  proper¬ 
ties  of  nega-Hadamard  transform.  Next,  we  concentrate  on  de¬ 
compositions  of  negabent  functions  with  respect  to  codimen¬ 
sion  one  subspaces,  and  negabent  functions  that  are  symmetric 
about  two  variables.  A  characterization  of  some  bent-negabent 
functions  in  the  MM  class  allows  us  to  construct  bent-negabent 
Boolean  functions  on  F|"  of  all  degrees  up  to  |_§  J .  Use  of  com¬ 
plete  mapping  polynomials  allows  us  to  further  construct  new 
classes  of  bent-negabent  functions  on  2 n  variables  of  degree 
greater  than  | . 
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